ssllabs is great and only works for publicly accessibly websites.
The challenge in my experience is to resolve the issue for internal sites, the thousands of internal tools and test domains from every department. None of the public tools can reach them.